Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bPbb9C03OvgjHKWEeoXmEOfSUoM.roa
File: bPbb9C03OvgjHKWEeoXmEOfSUoM.roa (raw, json)
Hash identifier: RI2dPBGhmB5ExZ9vavM6DjWDUEvXuGUqhBgL2YL1p/c=
Subject key identifier: 6C:F6:DB:F4:2D:37:3A:F8:23:1C:A5:84:7A:85:E6:10:E7:D2:52:83
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC994E01C20F303606E3F71A682128
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bPbb9C03OvgjHKWEeoXmEOfSUoM.roa
Signing time: Mon 01 Jan 2024 16:30:17 +0000
ROA not before: Mon 01 Jan 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47674
IP address blocks: 88.151.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:99:4e:01:c2:0f:30:36:06:e3:f7:1a:68:21:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf6dbf42d373af8231ca5847a85e610e7d25283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:cc:0e:b5:4f:eb:cf:54:73:3c:35:e5:fa:
3a:35:c3:2b:b1:8b:d1:e5:d9:ab:7c:03:a5:78:be:
a4:6b:46:93:94:d1:02:c5:ec:89:c0:5e:36:e8:3e:
16:8c:f6:46:b5:eb:bf:05:3e:01:2a:b4:de:ec:b8:
f1:bd:5e:ff:69:f5:8f:fe:be:a2:21:1b:28:64:70:
08:23:67:48:7d:e9:f4:85:70:c7:df:43:c5:de:82:
d3:8f:6a:72:3b:0b:96:93:d9:38:85:02:86:9c:c2:
18:47:88:95:78:c4:88:bf:77:af:49:3a:97:a2:84:
cd:e5:dd:a2:fe:43:6f:93:0e:30:c6:00:82:50:c4:
33:ef:69:a4:c3:fc:49:df:ab:33:42:24:c9:25:05:
cc:5e:ca:3b:50:a0:3b:ad:9c:5d:c5:1c:5b:86:93:
d8:3b:f8:2b:b1:fc:4b:ba:bf:f7:86:fd:5b:f6:cc:
12:c1:c2:5e:dd:28:d8:1f:b2:47:39:f6:c2:10:83:
e3:a3:06:a8:ca:a4:e1:91:5a:a7:2f:5c:36:60:88:
20:aa:d6:64:2a:9f:bd:c2:7b:dd:2c:ec:83:26:83:
4d:9e:5e:68:e2:06:c4:dc:d6:a2:58:df:bc:79:b1:
6b:f4:62:f9:48:63:7b:ad:db:5b:1c:87:2e:76:5e:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:DB:F4:2D:37:3A:F8:23:1C:A5:84:7A:85:E6:10:E7:D2:52:83
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bPbb9C03OvgjHKWEeoXmEOfSUoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.198.0/24
Signature Algorithm: sha256WithRSAEncryption
73:48:ef:37:a1:ac:fa:cf:b4:62:a7:a9:4f:89:64:1c:5f:e8:
99:09:dd:ad:9e:1d:ee:ba:03:96:c4:74:53:ab:56:91:be:1b:
fc:24:10:c1:e0:f5:e4:41:3b:11:f1:45:48:51:80:da:f5:48:
e0:e0:29:01:24:1e:41:3d:da:26:21:b0:18:9c:f6:f7:fe:b0:
31:4e:f8:bf:04:9a:86:69:ce:f1:a3:39:ba:8a:fe:f3:f1:c6:
db:13:61:e9:bf:5b:f6:7c:fd:3c:02:b4:c3:1e:51:ff:9a:2c:
bf:a4:41:4b:6f:15:f6:8e:46:6c:f7:bc:b0:e4:5c:14:e7:a6:
35:19:f7:ba:cb:a2:3b:9c:78:46:bb:0b:8e:af:6b:33:84:71:
03:5a:38:29:ee:3b:76:ce:c8:04:1b:81:7c:e0:34:49:58:35:
e8:cb:c2:dc:b4:a0:65:b4:6a:bb:6e:bd:8a:70:9f:76:bc:65:
58:4f:9c:80:1c:93:c5:1d:5f:b4:b0:76:00:ae:15:3c:f4:61:
ea:38:9c:af:93:6a:00:ac:83:7c:1c:d1:d5:04:27:2a:c3:30:
96:55:91:6d:00:a7:1f:42:2d:8b:42:3f:14:1a:a6:a7:37:7c:
dc:09:16:e9:67:5d:96:65:0e:50:71:a1:ab:a7:7c:63:83:3a:
fd:69:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:27:49 2024 by rpki-client on console-ams.rpki-client.org